{"id":2596,"date":"2016-08-10T10:32:36","date_gmt":"2016-08-09T22:32:36","guid":{"rendered":"http:\/\/www.zoyinc.com\/?p=2596"},"modified":"2018-07-15T08:45:24","modified_gmt":"2018-07-14T20:45:24","slug":"public-facing-web-server-on-sonicwall-vlan","status":"publish","type":"post","link":"http:\/\/www.zoyinc.com\/?p=2596","title":{"rendered":"Public facing web server on SonicWALL VLAN"},"content":{"rendered":"

\"\"\u00a0I have a SonicWALL TZ 205w sitting behind my fibre connection with my web server running on an ESXi server connected to the SonicWALL via a VLAN to isolate it from my LAN.<\/p>\n

This has proved to be a bit of a mission because I don’t have a modem between the SonicWALL and the ONT, optical network terminal. In addition my ISP uses a VLAN for fibre. Lastly because my ESX box only has one network card I am using a VLAN for connecting my web server to the SonicWALL.<\/p>\n

Related posts<\/h2>\n

ESX VLAN to SonicWALL DMZ<\/a>
\nThis details how to connect an ESX virtual machine to a SonicWALL DMZ to isolate it from the LAN<\/p>\n

Connect SonicWALL TZ205w to Fibre ONT<\/a>
\nThis details how to get the SonicWALL connected to fibre with Spark NZ which uses a VLAN.<\/p>\n

Setup<\/h2>\n

As with the other related posts it is important to remember I did this with a generation 5 SonicWALL appliance, TZ205w running firmware SonicOS Enhanced 5.9.1.6-5o.<\/p>\n

Most of the work for this is done using a wizard, so go click on “Wizards” at the top right of the SonicWALL web page<\/p>\n

\"\"<\/p>\n

Select “Public Server Wizard” and click on “Next>”<\/p>\n

On the “Public Server Type” select “Web Server” and enable only HTTP. I find it easier to do this as two tasks. Click on “Next>” to continue.<\/p>\n

On the “Server Private Network Configuration” page enter a server name the internal details of the internal web server:<\/p>\n

\"\"<\/p>\n

The screen is “Server Public Information” this is where you put the public IP of your web server. Previously I have entered the actual static IP of my server but the last time I left it as “0.0.0.0”<\/p>\n

\"\"<\/p>\n

Then finally you get to summary screen. Check this over and click on “Apply”:<\/p>\n

\"\"<\/p>\n

When finished you should see:<\/p>\n

\"\"<\/p>\n

At this point you will likely find that outside of your lan, on the Internet, people can get to your site but from the lan you can’t get to it. This is because the loopback policy is not working.<\/p>\n

You need to go to “Network | Routing” and you should find you have a new entry “DMZ Subnets”. You should click on the “Configure” button for this route:<\/p>\n

\"DMZ<\/p>\n

You should change this so it looks like:<\/p>\n

\"DMZ<\/p>\n

Naturally if you want this to be accessible via HTTPS you repeat but select HTTPS on the “Public Server Type” page.<\/p>\n

After getting this working I moved to a new Sonicwall. I am writing this part of the post some weeks after the event so I have forgotten the exact problem I had but I think it was around accessing from the LAN. None the less I am attaching some screen shots of the working system in case they are useful:<\/p>\n

 <\/p>\n

\"\"<\/a>
+Enlarge<\/figcaption><\/figure>\n
\"\"<\/a>
+Enlarge<\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"

\u00a0I have a SonicWALL TZ 205w sitting behind my fibre connection with my web server running on an ESXi server connected to the SonicWALL via a VLAN to isolate it from my LAN. This has proved to be a bit of a mission because I don’t have a modem between the SonicWALL and the ONT, […]<\/p>\n","protected":false},"author":2,"featured_media":2608,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[85,345],"tags":[347,352,359,357,356,346,353,358,355],"class_list":["post-2596","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-apache","category-sonicwall","tag-fibre","tag-firewall","tag-http","tag-loopback","tag-route","tag-sonicwall","tag-vlan","tag-web-server","tag-wizard"],"_links":{"self":[{"href":"http:\/\/www.zoyinc.com\/index.php?rest_route=\/wp\/v2\/posts\/2596","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.zoyinc.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.zoyinc.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.zoyinc.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.zoyinc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2596"}],"version-history":[{"count":9,"href":"http:\/\/www.zoyinc.com\/index.php?rest_route=\/wp\/v2\/posts\/2596\/revisions"}],"predecessor-version":[{"id":3162,"href":"http:\/\/www.zoyinc.com\/index.php?rest_route=\/wp\/v2\/posts\/2596\/revisions\/3162"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.zoyinc.com\/index.php?rest_route=\/wp\/v2\/media\/2608"}],"wp:attachment":[{"href":"http:\/\/www.zoyinc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2596"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.zoyinc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2596"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.zoyinc.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2596"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}